On 2016-03-30 08:39 , David MENTRE wrote:
> And there is also King et al. paper "Is proof More Cost Effective than Testing?" on SHOLIS project.> > Interestingly, for SHOLIS the efficiency of fault detection was, in decreasing order, "Z proof"> (i.e. spec proof), "System Validation" (i.e. System tests), "Integration Test", Code proof and> "Acceptance" (client tests?) and Unit test. This illustrates well that the best approach is a mix of> test (especially for integration and validation) and proof (especially at spec level, very> efficient, but code proof is also more efficient that unit test).

One should also take into account that SHOLIS is a project executed a decade and a half ago, and the
effective use of formal techniques has progressed since then, witness the information on IFACTS
contained in the 2014 Chapman-Schanda survey paper.